nutrition-analyzer

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests dietary and health data from various external JSON files, which could serve as a vector for indirect prompt injection if the input data is maliciously crafted. * Ingestion points: data-example/nutrition-tracker.json, data-example/nutrition-logs/YYYY-MM/YYYY-MM-DD.json, data-example/profile.json, data-example/fitness-tracker.json, data-example/sleep-tracker.json, data-example/hypertension-tracker.json, and data-example/diabetes-tracker.json in SKILL.md. * Boundary markers: None identified. * Capability inventory: Read, Grep, Glob, and Write tools as defined in the YAML frontmatter. * Sanitization: None identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 01:31 AM
Security Audit — agent-trust-hub — nutrition-analyzer